C H A P T E R 6 Configuring Network-Based Ids And Ips Devices - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Cisco IDS 3.1 Sensors
cd /usr/nr/etc
You need to edit 4 files (organizations, hosts, routes and destinations) that are in this directory.
Step 3
In the organizations file add a line indicating your organization name or grouping;
e.g., 1 protego
where 1 is the item number followed by the organization name protego. If there is already item in
this file, simply increase the item number (has to be unique).
Figure 6-1
In the hosts file add a line indicating your MARS appliances' name associated to the organization that
was previously added in the organizations file;
where 2001.1 is a unique item number followed by the MARS appliances' name and organization
name protego. If there is already items in this file, simply increase the item number (has to be
unique).
Figure 6-2
User Guide for Cisco Security MARS Local Controller
6-2
Add MARS Information to Cisco IDS 3.1 Organizations File
e.g., 2001.1 pnmars.protego
Add MARS Information to Cisco IDS 3.1 Hosts File
Chapter 6 Configuring Network-based IDS and IPS Devices
78-17020-01